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Abstract 

Gabidulin codes can be seen as the rank-metric equivalent of Reed-Solomon codes. It was recently proven, using subspace 
polynomials, that Gabidulin codes cannot be list decoded beyond the so-called Johnson radius. In another result, cyclic subspace 
codes were constructed by inspecting the connection between subspaces and their subspace polynomials. In this paper, these 
subspace codes are used to prove two bounds on the list size in decoding certain Gabidulin codes. The first bound is an existential 
one, showing that exponentially-sized lists exist for codes with specific parameters. The second bound presents exponentially-sized 
lists explicitly, for a different set of parameters. Both bounds rule out the possibility of efficiently list decoding several families of 
Gabidulin codes for any radius beyond half the minimum distance. Such a result was known so far only for non-linear rank-metric 
codes, and not for Gabidulin codes. Using a standard operation called lifting, identical results also follow for an important class 
of constant dimension subspace codes. 


Index Terms 

Rank-metric codes, Gabidulin codes, list decoding, subspace polynomials, subspace codes. 

I. Introduction 

Rank-metric codes have recently attracted increasing interest due to their application to error correction in random network 
coding |[30l where they can be used to construct constant dimension subspace codes. Further applications of codes in the rank 
metric include cryptography lITTl . (T9l . space-time coding 11201 . IfZTI and distributed storage systems (28], ||29l . 

For a prime power q, let F g be the field with q elements. For an integer n, let F (J «. be the extension field of degree n of 
F g (which may be seen as the vector space of dimension n over F g , denoted by F”), and F*„ = F g n \ {0}. For m > n, a 
rank-metric code is a set ofmxn matrices over F g , or alternatively, a set of vectors of length n over the extension field F g m, 
where the distance between two matrices is the rank of their difference. The rate of a rank metric code of size M is log|; M . 

_ _ _ ran 

Gabidulin codes, introduced by ©. uni, im may be seen as the rank-metric equivalent of Reed-Solomon codes. These 
codes are defined as evaluations of linearized polynomials (see below) of bounded degree at a given set of linearly independent 
evaluation points. We note that Gabidulin codes, and rank-metric codes in general, may be defined for any m > n, while our 
results only apply for the case n divides m (and in some cases, when n + 1 divides to by puncturing). In particular, our results 
apply for n = to. 

Given a word w G F” m (or alternatively, a matrix w G F™ x ”), a list decoding algorithm outputs all Gabidulin codewords 
that are inside a ball of radius r, centered at w, where r is possibly larger than the unique decoding radius of the code. 
For a given code, a natural question to ask is: for which values of r can list decoding be done efficiently? List decoding of 
rank-metric codes and Gabidulin codes was recently studied in 0, fl5l . Oil . In Oil , it was shown that Gabidulin codes cannot 
be list decoded beyond the Johnson radius. This result was generalized to any rank-metric code by 0. When m is sufficiently 
large, 0 also showed that with high probability a random rank-metric code can be efficiently list decoded. Further, it was 
shown in Oil that there is no Johnson-like polynomial upper bound on the list size since there exists a non-linear rank-metric 
code with exponentially growing list size for any radius greater than the unique decoding radius. In (151 . an explicit subcode 
of a Gabidulin code was shown to be efficiently list decodable. In addition, 0, (131 . and (Til have noted that it is not known 
if Gabidulin codes themselves can be efficiently list decoded beyond the unique decoding radius. In this paper, it is shown 
that the answer to this question is negative. 

Clearly, if there exists a word w G F"„, with exponentially many Gabidulin codewords in a radius r around it, then efficient 
list decoding is not possible for this radius. This combinatorial technique was used in j4| to show the limits of list decoding 
of Reed-Solomon codes, and in (Til to show the limits of list decoding of Gabidulin codes. 

The main tool in 0- ED is subspace polynomials, which are a special type of linearized polynomials. Linearized polyno¬ 
mials, defined by Ore (24l . are polynomials of the form 

P{x) = a r ■ x ^ + • • • + <zi • a;^ + ao • x, 
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where [i] = q l and the coefficients are in the finite field F q ,>. for some given n. For a linearized polynomial P. define the 
r/- degree of P as deg P = r = log^degP. Using the isomorphism between ¥ q n and F™, every linearized polynomial may 
be seen as an F^-linear function from F” to itself M Chapter 4, p. 108], that is, for every a,/3 G F g and u,v G F g „, each 
linearized polynomial P satisfies P(av + flu) = aP(v) + /3P(u). A subspace polynomial is defined as follows. 

Definition 1. j2 M3?, 071/ A monic linearized polynomial P is called a subspace polynomial with respect to F g n if it satisfies 
the following equivalent conditions: 

Al. P divides — x. 

A2. P splits completely over F ? « and all its roots have multiplicity one. 

A3. For some 0 < r < n, there exists an r-dimensional subspace V of¥ q n such that P(x) = n«ev( a ' — v )- 

By A3, each subspace V corresponds to a unique subspace polynomial, denoted Py. Subspace polynomials are an efficient 
method of representing subspaces, from which one can directly deduce certain properties of the subspace which are not evident 
in some other representations. These objects were studied in the past for various other purposes, e.g., construction of affine 
dispersers |3), finding an element of high multiplicative order in a finite field @, and construction of cyclic subspace codes 0. 
Albeit this wide range of applications, not much is known about the coefficients of subspace polynomials and their connection 
to the properties of the subspace. 

It is known that all roots of every linearized polynomial have the same multiplicity, which is an integer power of q, and 
these roots form a subspace in the extension field ||T8] Theorem 3.50, p. 108]. Therefore, any monic linearized polynomial 
is a power of a subspace polynomial with respect to its splitting field. However, the structure of the coefficients of subspace 
polynomials, compared to other linearized polynomials of the same degree, is generally not known. A partial answer to this 
question was given by 0, and we use similar techniques to show limits of list decoding of Gabidulin codes. 

Ben-Sasson et al. 01 proved that a given set of subspace polynomials with mutual top coefficients provides an upper bound 
on the list decoding radius of Reed-Solomon codes. A counting argument was later applied in order to show that such large 
sets of subspace polynomials do exist. A similar technique was used in lUTl to show the limits of list decoding of Gabidulin 
codes. In the sequel, the existence of a set of subspaces whose polynomials have a larger agreement is proved (Theorem [3j. 
This set is a subset of a subspace code by 0. Furthermore, explicit dense sets of words in a Gabidulin code are provided 
(Theorem |4}- Both bounds are used to show that the respective families of Gabidulin codes cannot be list decoded efficiently 
at all. That is, there exist received words that have exponentially many codewords around them, already for a radius which is 
only larger than the unique decoding radius by one (Examples Q] and 0 and Theorem [4} • Due to a technical limitation of our 
techniques, the presented families have rate at least ~. 

Subspace codes have attracted an increasing interest recently due to their application in error correction in random network 
coding EZ). It is widely known that rank-metric codes are deeply connected to constant dimension subspace codes through an 
operation called lifting 03, ESI. This operation preserves the distance and the cardinality of the original rank-metric code. 
An important family of nearly optimal constant dimension subspace codes are lifted Gabidulin codes (that are a special case 
of the so-called Kotter and Kschischang codes 03), which result from Gabidulin codes by lifting (see Definition |4}- List 
decoding of subspace codes was extensively studied in recent years. In particular, several variants and subcodes of the Kotter 
and Kschischang codes were shown to be efficiently list decodable (e.g., 0, Q3, 01, E3, ED and references therein), and 
bounds equivalent to 03 were discussed in 123 . Our results about Gabidulin codes also apply for lifted Gabidulin codes, 
and thus we get families of subspace codes that cannot be list decoded efficiently at any radius. Our techniques may also be 
used for showing limits to list decoding of Reed-Solomon codes, but the resulting bounds are too weak to provide any useful 
insight. 

These results reveal a significant difference in list decoding Gabidulin and Reed-Solomon codes, although the definitions 
of these code classes strongly resemble each other. Namely, Reed-Solomon codes can be efficiently list decoded up to the 
Johnson radius (with the Guruswami-Sudan algorithm lH4l ). whereas we have just proven that (some classes of) Gabidulin 
codes cannot be list decoded efficiently at all. 

The rest of the paper is organized as follows. Notations for subspace codes and the subspace code from 0 will be described 
in Section HU together with the required background on cyclic shifts of subspaces and ^-associates of polynomials. In Section Hill 
the code from Section |II] is used to prove the existence of a certain set of subspace polynomials, and the notion of ^-associates 
is used to show an explicit set of another type of subspace polynomials. The improved bounds on list decodability of Gabidulin 
codes are discussed in Section |IV] implications about subspace codes are discussed in Section [V] and conclusions are given 
in Section [VI] A discussion about the inapplicability of our techniques to list decodability of Reed-Solomon codes appears 
in |Appendix A| 


II. Preliminaries 

The set Q q (n, r), called the Grassmannian, is the set of all subspaces of dimension r (r-subspaces, in short) of F g n. The size of 
Q q ( n , r) is given by the Gaussian coefficient ["] = J][[Zq q q i+iZi - which satisfies q r ( n ~ r ) < < 4 q r ( n ~ r '> JT2l . A constant 

dimension subspace code 03 is a subset of Q q (n, r) under the subspace metric ds(U , V) = dim U + dim V — 2 dim (JJ D V). 
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An extensively used concept in this paper is cyclic shifts of subspaces, defined as follows. 

Definition 2. For V £ Q q ( n,r ) and a £ F*„ let aV = {av\v £ V}. 

The set aV, which is clearly a subspace of the same dimension as V, is called a cyclic shift of V. Cyclic shifts were shown 
to be useful for constructing subspace codes 0 , 0 . The set of all cyclic shifts of V £ Q q (n, r) is called the orbit of V, and 
its size is q qt Z\ for some integer t which divides n. The size of the orbit and the structure of its subspace polynomials can be 
derived by inspecting the subspace polynomial of V, as shown in the following lemmas. 

Lemma 1. ^2] Lemma 5] If V £ Q q (n,r) and a £ F*„ then P a v(x ) = .p v (a~ 1 x). That is, ifPy(x) = +X!j=o a j x ^ 
then P a y(x) = x^ + Yl'jZo o^~^ajX^. 

Lemma 2. fi2\ Corollary 3] Let V £ Q q ( n , r) and Pv{x) = a j x ^- If a s ^ 0 for some s £ {1,..., r — 1} and 

gcd(s, n) = t, then V has at least q q tZ\ distinct cyclic shifts. 

In [2| it is shown that subspaces in Q q ( n,r ), that may be considered as subspaces over a subfield of F g « which is larger 
than F 9 , admit a unique subspace polynomial structure. In what follows we cite the essentials from 0. For an integer g such 
that g\ gcd(n,r), let h be any F g s isomorphism between F 9 / 9 and F 9 ~, and notice that for all u,v £ F”/ 9 and a, (3 £ F g s, 
we have that h(av + (3u) = ah(v) + f3h(u). For V £ Q q a ( n/g,r/g) let H(V) = £ V}. The set H(V) is clearly 

a subspace of dimension r over F g in F 9 ~. Furthermore, the function H : Q q g ( n/g,r/g) Q q ( n,r) is injective since h is 
injective. 


Construction 1. jf2] Construction 1] For integers g,n, and r such that 0 < r < n and g|gcd(n,r), let 


<C 9 4 {H(V)\V £ Q qa (, n/g,r/g )}. 


Clearly, for g = 1 Construction Q] is trivial. Thus, we henceforth assume that g > 2, i.e., n and r have a non-trivial gcd. 
The subspace code C g has minimum subspace distance 2g. and it may alternatively be defined as direct sums of cyclic shifts 
of F gS or as the set of all subspace of Q q (n, r ) that are subspaces over F gS as well J2]. Since C ff is the image of an injective 
function from Q qB {n/g,r/g) to Q q (n,r), we have the following. 

Corollary 1. /H] Corollary 5] |C S | = 

The subspaces in C g admit a unique subspace polynomial structure, from which the results in this paper follow. 

Lemma 3. j|2] Lemma 14] If V £ Q q (n, r) then V £ C g if and only if Py(x) = J2iL 0 °i x where Ci £ F q n,Vi £ {0,..., r/g}. 


Another concept used in our constructions is the notion of ^-associates. Two polynomials over of the form t(x ) = 


J2i=0 a i X ' and L ( X ) = J2i=Q a i x9 


are called ^-associates of each other. For any g £ N, one can similarly define q 9 - 


associativity, where £(x) = Y^i=n a i xl > and L{ x ) = Y2i =0 aiX<i q 9 -associates of each other. Linearized polynomials over 

F g are deeply connected to their (-/-associates as follows. 


Lemma 4. IU8\ Theorem 3.62, p. 116] If Li(x) and L[x) are linearized polynomials over F g with q-associates £\{x) and 
£{x), then L\{x) divides L(x) if and only if l\(x) divides £{x). 


III. Sets of Subspaces Polynomials with Mutual Top Coefficients 

In 01 (resp. ll3 1 1 ) it was shown that sets of subspace polynomials that agree on many of their top coefficients provide a bound 
on the list decodability of Reed-Solomon (resp. Gabidulin) codes. By Lemma 0 it is evident that all subspace polynomials of 
subspaces in C g agree on their topmost g coefficients (1,0,..., 0). Using a counting argument we may prove the existence of 
a subset of C g whose corresponding subspace polynomials agree on a larger number of top coefficients. 


Theorem 1. If g,n, and r are integers such that 0 < r < n, g\ gcd(r, n), and £ is the unique non-negative integer such that 
r = n — g{£ + 1), then there exists a subset of C g of size at least 



whose subspace polynomials agree on their topmost g(£ + 1) coefficients. 


Proof: Consider the set of all subspace polynomials of subspaces in C g (Construction QJ- Lemma 0 implies that these 
polynomials have zero coefficients for all monomials x^ such that g \ j. Hence, they may be partitioned into q nt subsets 
according to their i + 1 top coefficients which correspond to monomials whose ^-degree is divisible by g. According to the 
pigeonhole principle, there exists a subset of size at least [”^ 9 ] /q nt whose polynomials agree on their top g(£- 1-1) coefficients. 
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Notice that for < 7 = 1 , Theorem Q] reduces to the ordinary counting argument employed by |4) and J3TJ. In addition, the 
case where n — r = g(£ + 1 ) > r, in which the polynomials in the set agree on all coefficients, is also trivial, since it merely 
implies the existence of a set of size one. Hence, this theorem is applicable only when r > n/2. 

The notion of ^-associativity, together with Lemma [T] allows us to construct an explicit large set of subspace polynomials. 
It will also be noted that in certain cases, this set of polynomials corresponds to the entire set C g . The construction is based 
on the following lemma. 

Lemma 5. If g, s, and r are integers such that gs\r and n = r + gs, then the polynomial P{x) = Xw=(T 1 iiV a subspace 
polynomial with respect to F g n. 


Proof: Since gs\r, there exists an integer a such that gsa = r, thus n = gs(a + 1) and s|^. It follows that 


x n/g _ 1 
X s — 1 


= X a 


X 9 


and hence (x n ! g s + x n I 9 2s + ... + l)\(x n ^ 9 — 1). According to Lemma [4] the g ff -associates of these polynomials satisfy 
Erif—^ M i(^ w -*), and thus P is a subspace polynomial of an r-subspace in F f/ ,, by Definition Q] ■ 

By Lemma Q] and Lemma [5] we have a large set of subspace polynomials whose coefficients may be given explicitly. 

Construction 2. If g , s, and r are integers such that gs\r and n = r + gs, then 


i/gs-l 


2= En 1 


Y\-[igs\ x [igs\ 


i=0 


G B 


consists of subspace polynomials of subspaces in Q q (n, r), where B is any set of nonzero representatives of the orbit 

of¥ q gs. 


Proof: Since n = r + gs and gs\r, it follows that gs\n, and thus F g9 s is a subfield of F ? n. By Lemma 0 the polynomial 
Pv{x) = E"=o S_1 x^ lgs ^ is a subspace polynomial of some V G Q q ( n,r ). Let B be any set of representatives of the orbit of 
F 9 9 s, that is, a set consisting of a single nonzero element from each subspace in {aF gS s|a G F*„}. Since the size of the orbit 
of F,jbs is qgsZ ^ , and since all subspaces in it intersect trivially ||9] Section III], it follows that \B\ = ij- . By Lemma Q] for 
all /? G B we have that Ppv{x) G Z. We are left to show that if fii, P 2 G B, then f}\V 82 V. 

Assume for contradiction that there exists 81,82 G B such that 81 V = 82 V. It follows that Pp^ix) = Pp 2 v{x), and 


Lemma [I] implies that the coefficients of x are equal, that is, 
a q = a, we have that 


? [n-gs]-l _ p[n-gs ]-1 


. Therefore, since every a G F, ; « satisfies 






,q 9a -q n 

,s —1 


82 Q 


8f~ 1 


= 1 . 


It is widely known (e.g., lfl8l Theorem 3.20, p. 91]) that the subspace polynomial of F, 


gs IS X 


T _ 


x, which implies that 


8182 1 £ F g g», and thus 81 G 82 ^qs*- Since 82 G 82 ^'q 9a , it follows that 81 an d 82 belong to the same cyclic shift 82 F g s», a 
contradiction. ■ 

Notice that the set B of representatives of F g s 


(see Construction O may easily be found. For example, if 7 is a primitive 


element of F 9 n, since the set {0} U {y l ( q L/L 3 1 i }? =0 ! is F, ;f ,», it follows that a possible set of representatives of the orbit 
of F g ss is 


B = 


0 <i< 


- 1 


- 1 


q gs _ 1 

Remark 1. For s = 1, the set Z from Construction [2] consists of all subspace polynomials of subspaces in C rj (see 
Construction 0. This is since the number of cyclic shifts of¥ q g is q qg f\ and the size ofC g is l ] = ^ a ~| . 

In Section IIV1 we consider subspace polynomials over F, ; n as polynomials over an extension field F g m of F ? n. In order to 
use the above claims over F ? m, the following formal lemma is required. The proof of this lemma is an immediate corollary 
of the existence of an injective homomorphism </> : F ? n —>• F q m. 
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Lemma 6 . Let Py(x) = + ^j=o v j x ^ an d Pu{x) = + Ylj =o u j x ^ be two subspace polynomials of subspaces in 

Q q (n, r), and let F g m be an extension field of¥ q n. If we consider Py,Pu as polynomials Py^Pu 1 over F q m, i.e., 

r— 1 

Py(x) = 

3=0 
r— 1 

P{j(x) = X^ + ^ UjX^ 

3=0 

where the coefficients are in F g m, then for all j £ {0,..., r — 1}, Vj = Uj if and only ifv'j = 'ill. Furthermore, the polynomials 
Pv,Pu’ are subspace polynomials in Q q ( m,r ). 

Notice that generalizing Lemma [ 6 ] to the case where F g ™ is not an extension held of F g n, i.e. U and V are subspaces in 
F q m which are contained in a subspace of dimension n, is not clear. However, such a generalization is necessary to use our 
techniques to bound the list size for any m > n. 


IV. Improved Bounds on List Decodability of Gabidulin Codes 

We begin by formally defining Gabidulin codes, which are rank-metric codes that attain a Singleton- like bound. Any rank- 
metric code over F ? m of length n, minimum rank distance d, and size M satisfies M < q m (n-d+i) ||27l . For a linear 
rank-metric code of dimension k, this bound implies that d < n — k + 1. Codes which attain this bound are called maximum rank 
distance (MRD) codes. It can be shown that Gabidulin codes, defined below, are linear MRD codes, attaining d = n — k + 1. 

Definition 3. fTW A linear Gabidulin code Gab[n, k\ over F q m, length n < m, and dimension k < n is the set 

Gab[?r, k] = {(P(ai),..., P(a n )) |deg 9 P < k} , 

where P traverses all q-degree restricted linearized polynomials, and a \,... ,a n are some fixed elements of¥ q m which are 
linearly independent over F g . 

In ED it was shown that large sets of subspace polynomials that agree on many top coefficients may be used to show 
the limits of list decoding of Gabidulin codes. For the lack of knowledge about the structure of the coefficients of subspace 
polynomials, a counting argument was later applied to show the existence of such a set. The resulting bound on list decoding 
of Gabidulin codes is cited below. In what follows, for w £ F^ m and r£l, let B T {w) = {c | rank(u> — c) < r}, that is, a 
ball of radius r centered at w. 


Theorem 2. 07] Theorem 1 ] Consider the code Gab[n, k\ over F g m, with d = n — k + 1. If t < d, then there exists a word 
w £ F” m such that 

\ ” 1 

|Gab[n,fc]ng r H|> n ~_?_ k . 

As a result, the following bound is achieved. 


Corollary 2. 07] Section III] The code Gab[n, k] over F q m, with d = n — k + 1 cannot be list decoded efficiently for any 
list decoding radius 


T > 


m + n 

— 


(m + nfi 


m(d — e), 


for any fixed 0 < £ < 1 . 


For n = m, this bound simplifies to _ 

r > n — \Jn(n — d + e), 

which may be seen as the rank-metric equivalent of the Johnson radius ll3l . and for e = 0 it is equal to the Hamming-metric 
Johnson radius. 

By Lemma |3) in certain cases there exists a large set of subspace polynomials with a unique coefficient structure. Restricting 
the counting argument used in the proof of Theorem [2] to the set C 9 (Theorem [lj provides a bound which may outperform 
Corollary [2] The proof of the following theorem is illustrated in Fig. [T] and its consequences are discussed in the sequel. 

Theorem 3. For integers k < n < m such that n divides m, let Gab[?r, k] be a linear Gabidulin code over F^m, with 
d = n — k+1 and evaluation points ai,..., a n £ f3¥ q n for some j3 £ F*™. Let r, g be integers such that + l<T<d— 1, 
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Fig. 1. An illustration of the proof of Theorem |3] The proof of Theorem |4] is similar. The ball around cr of radius r contains the words cr—p. & for 
P i.P e Vp, where \Vp\ = , g \ q J^■ 


g > 2, and p|gcd(n — T,n). If t is the unique integer such that n = n — r + g(t + 1) (and thus, r = g{( + 1)J, then there 
exists a word cr £ F" m \ Gab[n, k\ such that 


|Gab[n, k\ D B t {cr)\ > 


\ n h 

L (n— 


(n-r)/gJ „g 


q 


,n£ 


0 ) 


Proof: According to Theorem[f] there exists a set V of [/ n "(.w g ] g /Q ni subspace polynomials of subspaces in Q q (n, n — r), 
that agree on their topmost r = g(l + 1) coefficients. The coefficients of these polynomials are in the field F g n. Since n\m, 
we have that is a subfield of F g m, and thus these coefficients may be considered as elements of ¥ q m. Recall that according 
to Lemma [ 6 ] these polynomials agree on their topmost r coefficients also when considered as polynomials over F g ™. 

Further, let {Vpjpg-p C Q q (n, n — r) be the subspaces which correspond to the subspace polynomials in V. For P £ V, 
let Pp be the subspace polynomial of f3Vp, and let Vp = { Pa} rev- According to Lemma [Q and according to the properties 
of V, it follows that the polynomials in Vp agree on their topmost r coefficients. Since multiplication by /3 is an injection, it 
also follows that \P\ = \Pp\. 

Let R be any linearized polynomial over F ? m of (/-degree n—r that has the mutual top coefficients of Vp, and let cr £ F” m be 
the word resulting from the evaluation of R at oti, ..., a n . Similarly, for Pp £ Vp let cn-p fl £ F",„ be the word corresponding 
to the evaluation of R — Pp at cti ,,a n . 

Since deg q (R — Pp) < n — r — g(I + 1) and r = g(£ + 1) > it follows that 2r = r + g(f +1) > n — k, 

and hence. 


k > n — t — g(I + 1) > deg q (R - Pp). 

Therefore, the word cr-p p is a codeword of Gab[n, k] for all Pp £ Vp. In addition, since r < d — 1 it follows that 
deg ? R = n — t > n — d + l = k, and hence cr £ Gab[n, k]. 

Since every linearized polynomial can be viewed as an F,^linear mapping (see Section I), it follows that for every Pp £ Vp, 

rank(cR - c R - Pft ) = rank((P /3 (ai),.. .,Pp(a n ))) 

= dim (Pp(a i),..., Pp{a n )) 

= dimP /3 ((ai,...,a n )) 

= dim Pp(f3W q n), 

where the last equality follows from the fact that a\ ,..., a n are n linearly independent elements in 3¥ q n, a subspace of 
dimension n. Since Pp is a subspace polynomial of f 6Vp, which is a subspace of dimension n — r that is contained in /3F 9 », it 
follows that dimP | g(/3F 9 n) = r. Thus, the set {cR-p p }p pS .-p p C Gab[n, k] is a set of size /q ni , which is contained 

in a ball of radius r around the word cr. ■ 
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Notice that the restriction on the parameter r, mentioned after the proof of Theorem [TJ implies the necessary condition 
r = n — t > n/ 2, and hence t < n/2. However, this limitation becomes trivial when discussing r which is approximately the 
unique decoding radius d/2, since d < n. 

A simple analysis of <jT]) shows that 


|Gab[n, k\ (T B t (cr)\ > 
> 


r n /g 1 

V{n-T)/g\ l 


q nt 
(q 9 ) g 

n ni 


(n —t ) — — n£ SlL- 

q K ’a = q 9 

n(£+l)— g{£+l ) 2 — n£ 


—ni 


qU-g{l+ 1) 2 _ n-r(i+l)^ 


and hence, this bound results in a list of exponential size whenever g(£+ 1 ) 2 < c-n for c G (0,1), or alternatively, when r < jf/j. 

The following examples provide infinite sets of Gabidulin codes, with rates from to 1, that cannot be list decoded efficiently 
at all according to the bound from Theorem 0 This result strictly outperforms the bound from Corollary [2] and provides an 
answer to an open problem by [7), fl5l Section 6 ], and lf3Tl Section V], that is, there exist Gabidulin codes that cannot be 
efficiently list decoded beyond the unique decoding radius. 


Example 1. Let n be an integer power of 2, and let 1 < i < logn — 2. For any integer m such that n\m, consider a 
Gab[n, (1 — ^-)n + 2] code over V q m with evaluation points that span f3W q n for some /3 G F* m , and let r be the smallest 
possible list decoding radius, that is, 


A 

T = 


d- 1 
. 2 . 


+ 1 = 



+ 1 = 


n 

2 i + 1 ' 


Let g = ~frr = t, and notice that g >2. To see that g\ gcd (n,n — t), notice that since n is an integer power of 2, it follows 
that r\n, and thus g\n. In addition, we have that r(2 i+1 — 1) = n — t, thus r|(n — r) and g\(n — r). Therefore, in Theorem\3\ 
we may choose g = = 0 , and get that there exists a word cr G with codewords in a ball of radius 

t around it. Since t is larger than the unique decoding radius by one, this code cannot be efficiently list decoded at all. A 
detailed comparison between this bound and im appears in 

Example 2. Let g , a n , and a T be positive integers such that a n > a 2 + 1. For n = a n g, r = a T g, and any integer m such 
that n\m, consider a Gab[n, n — 2r + 1] code over F q m with evaluation points that span f3¥ q n for some (3 G F* m , whose 
minimum distance is d = 2 t, and whose rate is 

n — 2r + 1 i 2 a T 1 
n a n n 

According to Theorem |i] there exists a word cr having 

\ n/g ] 

l(n-T)/g\ q g ^ 


Appendix B 


codewords in radius r around it, where I = rjg — 1 = a T 


' n/g I 
{n-T)/g\ q g 


> 


— 1. Simplifying this expression, we have that 

r OLn 1 

LcKtj, —Ol t A qg 
qn(a T - 1) 

(gS)( a " _ar )“ T 
qn(a ! T -1) 

qU-Ta r _ q(a. n -of)g. 


If a T and a n are constants then g = f l(n) and = q^( n ) y which implies that the list size is exponential in the code 

length. Since r < n/2, as mentioned after Theorem 0 it follows that a n > 2a r , and thus we have the following two interesting 
families of codes. 

1) For a n = 3 and a T = 1 we have the code Gab[3 g,g + 1] over any field F g m such that 3g\m, with evaluation points 
that span /3F q 3g for some /3 G F* m . The rate of this code is ^ and its minimum distance is 2 g. For the radius 
t = g, there exists a word Cr with at least q 2g = q^ n ^ codewords around it, and hence this code cannot be list decoded 
efficiently at all. 

2) For a n = 5 and a T = 2 we have the code Gab[5 g,g + 1] over any field F q m such that 5g\m, with evaluation points 
that span /3F g 5 9 for some j3 G F* m . The rate of this code is | + i, and its minimum distance is 4 g. For the radius 
















r = 2 g, there exists a word cr with at least q 9 = q^ n ) codewords around it, and hence this code cannot be list decoded 
efficiently at all. 

Clearly, this strategy can be used to construct examples of families with larger code rates, but i + ^ is the smallest one. This 
may be seen by considering all integers a T and a n which comply with the above constraints. That is, for a T = 1 and a n > 4, 
the rate is at least | + —, for a T = 2 and a n > 6 the rate is at least | and for any a T > 3 and any a n > a 2 + 1 the 

rate is at least 5 + ^ 7 - 

In the following, we present a simple algorithmic way of constructing many dense sets of Gabidulin codewords. These sets 
also show that the corresponding Gabidulin codes cannot be efficiently list decoded beyond the unique decoding radius. In 
addition, we have that for certain Gabidulin codes, dense sets of codewords abound and may easily be computed explicitly. 


Theorem 4. Let g,s,n, and m be integers such that g > 2, gs\n, and n\m. Let Gab[n, n — 2 gs + 1 } be a linear Gabidulin 
code over ¥ q m, with d = 2 gs and evaluation points ..., a n £ /3F 9 n for some f3 £ F*™. If r = + 1 = gs, then there 

exists an (explicitly defined) word cr £ F” m \ Gab[n, n — 2 gs + 1] such that 

q n - 1 

|Gab[n, n - 2 gs + 1 ] G B t (cr)\ > — --. 

QfJ — 1 

In particular, if R is the polynomial whose evaluation in a\,...,a n yields cr, then of the codewords in B t (cr) are 

given by the evaluations of {R — Pp}p p ^Zp in a.\, ■ ■ ■ ,a n , where Zp is the set of subspace polynomials which result from 
shifting Z (Construction m by/3. 


Proof: Since gs\n — gs, by setting r = n — gs it follows from Construction |2] that the set Z is a set of subspace 
polynomials of subspaces in Q q {n,n — gs), whose size is ^ g f~_ 1 . Since n\m, we have that F g ™ is a subfield of F q m, and 
therefore the polynomials in Z may be considered as polynomials over F g m as well. According to Construction [2] and Lemma[ 6 ] 
the polynomials in Z agree on their topmost gs coefficients (1,0,... ,0), even when considered as polynomials over F ? m. 
Similar to the proof of Theorem 12 let { Vp} iyz be the set of subspaces in Q q (n, n — gs) which corresponds to the subspace 
polyonmials in Z, let Pp denote the subspace polynomial of fdVp, and let Zp = {Pp)p^z- Clearly, we have that \Z\ = \Zp\, 
and by Lemma Q] it follows that the subspace polynomials in Zp agree of their topmost gs coefficients (1, 0,..., 0). 

Let R be any linearized polynomial of ^-degree n — gs whose top gs coefficients are (1,0,..., 0), and let cr £ F” m be 
the word resulting from the evaluation of R at 0 : 1 ,..., a n . For each Pp £ Zp let cr-p 0 £ F”,„. be the word corresponding to 
the evaluation of R — Pp at cti, ..., a n . For all Pp £ Zp we have that deg q (R — Pp) < n — 2 gs < n — 2 gs + 1, and thus 
CR—Pp £ Gab[n, n — 2 gs + 1]. In addition, deg g R = n — gs, and thus cr f. Gab[n, n — 2 gs + 1]. 

As in the proof of Theorem [3] for all Pp £ Zp we have that rank(cR — cr-p p ) = dim Pp (/3¥ q n) = gs. Therefore, the set 
{cR-p^pp^Zp is a set of codewords in Gab[n, n — 2 gs + 1], all of which are of distance at most r = gs from cr. ■ 

Notice that each code in the family of codes mentioned in Theorem 0] satisfies d = 2 gs, and hence the unique decoding 
radius is = gs — 1. Furthermore, since gs\n, it follows that gs <?’ and thus the word cr has Cl(q n t 2 ) codewords in a 

ball of radius r = \ + 1 around it. Hence, this family of Gabidulin codes cannot be list decoded efficiently at all. 

It is an interesting question if our results can be used to derive a lower bound on the number of words that have an 
exponentially-sized list of codewords around themselves. If it can be proved that there are just a few just words, we might 
be able to remove a few codewords of the Gabidulin code to obtain a list decodable code of slightly smaller rate. The code 
constructed in ED seems to be such a list decodable code. 

Further, for folded Gabidulin codes such a subcode might be easy to find. The results from 0] show that the average list 
size of folded Gabidulin codes is quite small, indicating that there are only a few words with an exponentially-sized list around 
them. 

Finally, the results in this section can be used to prove bounds for punctured Gabidulin codes, which are obtained by 
removing coordinates from the original code. Puncturing a Gab[n, k\ code by s < n — k + 1 positions yields a Gab[n — s, k) 
code. We can therefore provide lower bounds on list decoding of Gabidulin codes where n does not divide m. 


Lemma 7. Let C be a Gab[n, k] code over F g m with minimum distance d = n — k +1, let s be an integer such that s < d, and 
let C s be a Gab[n — s, k] code which results from C by s puncturing operations, whose minimum distance is d' = n — s — k + 1. 
If C cannot be list decoded efficiently at all, i.e., there exists a word w £ Fjj m such that 

\CnB r (w)\ > g n(n) 


where r = ^ ■*-> then C s cannot be list decoded efficiently for any radius at least t' + s', where t' = \_ d 2 1 j + 1, and 

1) If s is even, then s' = 

2) If s is odd and n — k is even, then s ' = | + y 

3) If s and n — k are both odd, then s' = | — y 


2 
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T= L^J +1 

r' m L "—2 J + 1 

Resulting radius 

n — k and s are both even. 

n — k , -i 

2 "T" 1 

n—k s | -] 

2 2 ' 1 

t = t' + f 

n — k is odd and s is even. 

n—k— 1 i 

2 ^ 

n—k— 1 s i i 

2 2 ' 1 

r = r' + f 

n — k is even and s is odd. 

n—k , -I 

2 "r 1 

n — k s+1 -| 

2 2 1 

r = t' + f + 1 

n — k and s are both odd. 

n — k— 1 i -| 

2 “T - 1 

n—k— 1 s—1 i i 

2 2 ' 1 

r = T ' + f - \ 


TABLE I 

The resulting radius in Lemma[7] If Gab[n, k] cannot be list decoded efficiently for the radius t, then the punctured code 
Gab[n — s, k] , s < n — k + 1, cannot be list decoded efficiently for this radius as well. The rightmost column provides t as a 
function OF t' and s, where the unique decoding radius of Gab[n — s, k] is t' — 1. The given values for t' are simple calculations 

WHICH FOLLOW FROM n — k — S BEING EITHER EVEN OR ODD. 


Proof: Since puncturing may only reduce the distance between any two given words, and since any two codewords in C 
cannot coincide by puncturing s < d coordinates, it follows that 

\C s nB T (w')\ > q n{n) , 

where w' £ F”m s is the result of puncturing w. Hence, C, cannot be list decoded efficiently beyond the radius r. Table U 
presents the values of r as a function of r' and s, from which the claim follows. ■ 

Since the addition to the unique decoding radius t' of Gabfn — s, k] in Lemma [7] is usually nonzero, it is not clear if those 
punctured codes indeed cannot be list decoded efficiently at any radius. However, for the special case where s = 1 and n — k 
is odd, we obtain the following corollary. 

Corollary 3. For integers 0 < k < n such that n — k is odd, if Gab[n, k\ cannot be list decoded efficiently at all, i.e., there 
exist a word w £ such that 

\CnB T (w)\ > q n(n) 

where t = + 1> then the punctured code Gab[n — 1, k } cannot be list decoded efficiently at all. 

Although Corollary [3] does not provide a drastic improvement in the variety of codes to which our bounds apply, it does imply 
the important observation that the divisibility constraints between n and m in Theorem [3] and Theorem 0 are not necessary. In 
addition, one may obtain infinite examples of Corollary [3] by puncturing either of the codes Gab[3r/. g + 1] and Gab [or/, ij + 1] 
from Example [2] and thus obtain Gab[3r/— 1,5+1] and Gab [hr/- 1, g+ 1] codes that cannot be list decoded efficiently at all. 

V. Bounds for Constant-Dimension Subspace Codes 

In this section, we state new bounds on list decoding lifted Gabidulin codes (see l30l ). which are a class of almost-optimal 
constant dimension subspace codes. Lifted Gabidulin codes are of special interest since, in contrast to many other subspace code 
constructions, they can be efficiently decoded (see [ 30j) while only losing a relatively small number of codewords compared 
to other subspace code constructions. These bounds are a direct consequence of our bounds for list decoding Gabidulin codes 
(Theorem [3 and Theorem 0]). 

Throughout this section, the quadruple (n, M s ,d s ,r) q denotes a constant dimension subspace code in the Grassmannian 
Q q ( n,r ) of cardinality M s and minimum subspace distance d s . Further, (A) denotes the subspace spanned by the rows of a 
matrix A. The lifting is a map which is applied to a single matrix or a set of matrices and is defined as follows. 

Definition 4. Consider the mapping 

I: F£ xm -+g q (n,n + m) 

X ^ ([In X ]), 

where I n denotes the n x n identity matrix. The subspace I (X) = ([/„ X]) is called lifting of the matrix X. If we apply this 
map on all codewords of a code C (in matrix representation), then the subspace code 1(C) is called lifting of the code C. 

The properties of a lifted code were studied by Silva, Kschischang and Hotter and are summarized in the following two 
lemmas. 


Lemma 8. H30\l Let X , Y £ |f™ xm and let I (X ), X (Y) £ Q q (n + m, n) be as in Definition 0 Then, 

d s (l(X),l(Y))=2-d R (X,Y). 
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Proof: 


d s (X (X) , X (F)) = 2 dim (X (X) + X (F)) 

- dim (X(X)) - dim (1(F)) 

= 2rank (t y)~ 2ri 

= 2rank (o y X x)' 2n 
= 2 [rank(/„) + rank(X — F)] — 2n 
= 2 rank(X - F) = 2 d R (X, Y). 


The following lemma directly follows from Lemma [ 8 ] 


Lemma 9. fKfil Let C be a rank-metric code over F g m of length n < m, minimum rank distance dn and cardinality Mr, 
whose codewords are represented as m X n matrices over F g . Then, the lifting of the transposed codewords, i.e., 


X (C T ) = jx (C T ) = ([/„ C T ]) 


Cec} 


is an (n + m, M s = Mr, d s = 2djj, n) q constant dimension subspace code. 


Hence, the lifting of the transpose of a Gab[n, k] code over F q m with n < m, minimum rank distance d = n — k + 1 and 
cardinality Mr = q mk results in an ( n+m, q mk , 2d, n) q constant dimension subspace code in the Grassmannian Q q (n + m, m). 

So far, the only known bound to list decoding subspace codes was given in l26l and is based on the results for Gabidulin 
codes from ED- The following theorem summarizes the result from l26l . 


Theorem 5. |26] Theorem 37] Let C be a linear Gab[n, k\ Gabidulin code over F ? m of length n < m, d = n — k + 1, 

evaluation points a\,..., a n £ ¥ q m, and let t be an integer such that \r/2\ < d. Denote by X (C T ) the (n + m, q mk ,2d, n) q 
subspace code from the lifting of the code C as in Definition [3 Then, there is a subspace (R ) such that 


\I(c T )nB‘ r ({R))\ > 


qm(n-k- Lr/2J) ' 


Let B^.((W)) = {(F) | d s ((W), (V)) < t} denote a ball of radius r centered at (IF) in the subspace distance. With 
Lemma [ 8 ] we obtain the following relation between a rank-metric code C and its lifted subspace code X ( C T ): 


| c n b t (c r )\ < |x (c T ) n b s 2t (i ( c %)) 


This relation and Theorem [3] provide the following theorem on the list size of lifted Gabidulin codes. 


(3) 


Theorem 6 . Let C be a linear Gab[n, /c] Gabidulin code over F ?m with length n\ m, d = n — k + 1, and evaluation points 
ai,... ,a n £ f3W q n for some £ F*™. Let r, g be integers such that +1 < {§J < d — 1, g > 2, and g\ gcd (n — [_§J> n )• 

Let £ be the unique integer such that n = n — + g(£ + 1) (and thus, = g(£ + 1)) and denote by I (C T ) the 

(n + m, q mk , 2d, n) q subspace code from the lifting of the code C as in Definition 0 

Then there exists a subspace X (cr) £ Q q (n + m, n), where cr £ F^ m \ Gab[?r, k] such that 

[ n/g I 

\l(C T )nB‘ r (I(cl))\> 

> q n ~\j/ 2 J(^+i). 


Proof: The statement follows from (0 and Theorem 0 The floor operation for {r/2j is necessary since the subspace 
distance is an even number, see explanation of the proof of l26l Theorem 37]. ■ 

Thus, this bound results in a list of exponential size for even r when r < jyfi and for odd r when r < + 1 for c £ (0,1), 

which results for many cases in a better bound than the one from (26, Theorem 37]. Similarly, from Theorem [4] we obtain 
the following theorem. 

Theorem 7. Let g,s,n, and m be integers such that g > 2, gs\n, and n\m. Let C be a linear Gab[n,n — 2 gs + 1] 

Gabidulin code over F ? m , with d = 2gs and evaluation points ai,... ,a n £ / 3 F g n for some ft £ F* m . Denote by X (C T ) the 

(n + m, g ,m ( n - 2 9 s + 1 ) j 2d, n) q subspace code from the lifting of the code C as in Definition 0 
If {§] — L^J + 1 = gs, then there exists an (explicitly defined) subspace X ( Cr ) £ Q q (n + m, n), where 

cr £ F^ m \ Gab[n, n — 2gs + 1], 
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such that 


\i(C T )nB°(i(c T R ))\ > 


q n - 1 
qgs _ 1 


q n - 1 
ql T / 2 J - 1' 


The explicitly defined subspace follows directly from lifting the matrix representation of the explicit word of Theorem 0] 
In OTI . a non-linear rank-metric code was presented which cannot be list decoded efficiently at all. The lifting of this code 
obviously results in a subspace code with the same restrictions to list decoding as lifted Gabidulin codes. However, lifted 
Gabidulin codes are of special interest for network coding and therefore, we have analyzed their list decoding capability in 
this section. 


VI. Conclusions and Future Work 

We have improved the worst-case bound on the list decodability of Gabidulin codes in many cases. This was shown by 
using the structure of the subspace polynomials of a subset of Q q ( n , r) for n and r that have a non-trivial gcd. In addition, 
we have presented such subspace polynomials explicitly, using the notions of cyclic shifts and (/-associativity. Both of these 
results outperform the counting argument applied in ||3T| , and provide examples of infinite families of Gabidulin codes that 
cannot be list decoded efficiently beyond the unique decoding radius. This resolves an open question by Q, |Q3), and 13T1 and 
reveals a significant difference between decoding Gabidulin and Reed-Solomon codes despite their similar code definitions. 

The work of 07) ruled out the existence of an efficient algorithm for list decoding of Gabidulin codes beyond the Johnson 
radius. Our work rules out the existence of an efficient list decoding algorithm that applies for any Gabidulin code and any 
radius beyond half the minimum distance. However, this certainly does not rule out the existence of an efficient algorithm for 
list decoding of very large subcodes of Gabidulin codes or Gabidulin codes with lower rates, since our work requires the code 
parameters to satisfy some strict number-theoretic and field-theoretic constraints, and our examples have rate at least V For 
example, m provides a subcode of a Gabidulin code which can be list decoded efficiently. 

We have also shown that identical results hold for lifted Gabidulin codes, which are an important class of nearly optimal 
subspace codes. Additional discussion about the inapplicability of our techniques to improve the known combinatorial bound 


on list decoding of Reed-Solomon codes appears in Appendix A 


For future research, we would like to have similar bounds on Gabidulin codes in Fwhere the evaluation points do not 
necessarily come from a cyclic shift of F g n. This seems to require a rigorous understanding of the connection between the 
subspace polynomials of a given subspace V and the subspace A ■ V, where A is a nonsingular transform. Moreover, we 
would like to generalize our results for any case where n does not necessarily divide to, a problem which seems to require 
generalizing Lemma [6] to the case n \ m. In addition, we would like to derive bounds for Gabidulin codes with rates less 
than 4. 

O 


Appendix A 


In 0), limits for list decoding of Reed-Solomon codes were shown using techniques which highly resemble the ones in l3l) 
and in this paper. The interested reader might conjecture that the improvement achieved here (see Theorem[3]and Theorem[4} for 
Gabidulin codes may also be attained for Reed-Solomon codes, for which list decoding related problems were very extensively 
studied. In what follows we briefly describe why such an improvement cannot be directly attained by our techniques. Adapting 
these techniques to Reed-Solomon codes remains an intriguing open problem. In the sequel, we briefly describe the methods 
and results of E). 

Following the notations in 0), a Reed-Solomon code RS[g ra ,g“] of length q" and dimension (/" is a subset of ¥ qn such 
that 




p ■ F 9 n -» F g n is a | 

RS [q n ,q u }=< 

(p{ai),... ,p(a q n)) 

polynomial with 

deg (p) < q u j 


where {cu}? =1 are all elements of ¥ q n . Notice that Reed-Solomon codes may be defined as the evaluation of polynomials in 
any number of elements in the field. However, we consider this definition for convenience. Notice also that any word w £ F'j„ 
may be regarded as a polynomial over F g n, and any word c £ RS[(/ n . (/"] may be regarded as a polynomial over F g n of 
bounded degree. 


Definition 5. 0] Definition 3.3] A family of polynomials V C F g n[cc] is said to be an (a, s) -family if 

1) Each polynomial in V has at least a roots in F ? n. 

2) There is a polynomial P* such that for all P £ V, P* — P has degree at most s. We refer to P* as a pivot of the family. 


Lemma 10. 0j Proposition 3.5] Let a,s and l be positive integers. Then, the following are equivalent. 

1) There is a word w : F g n — > F g n and £ polynomials P 1; ..., P# of degree at most s such that for i = 1,2,... Pi and 
w agree on at least a points of¥ q n. 

2) There is an (a, s)-family of size £ of polynomials, whose pivot is the unique polynomial P w that agrees with the word 
w on all elements in F g n. 
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The polynomial P w corresponds to the “problematic” word, that is, the word that has exponentially many codewords in 
a small radius around it. The polynomials Pi,..., f\. having a low degree, are the codewords surrounding P w . It is readily 
verified that the polynomials Pi,... ,Pi are inside a ball of small radius centered at P w if and only if the polynomials 
{P w — P t }l—i have multiple roots in F 9 «. As subspace polynomials have many roots over F g n, they are good candidates for 
playing the role of the polynomials {P w — Pj}f =1 . This intuition is formalized as follows. 

Lemma 11. If S C Q q (n , r) is a set of subspaces whose corresponding subspace polynomials have identical r — t top 
coefficients for some integer t < r, then the set of subspace polynomials of S forms a (q r , q f )-family. 

Proof: Let W be the set of subspace polynomials of the subspace in the set S. Since every polynomial in W is a subspace 
polynomial, it has exactly q r roots in F g n. If P w is the linearized polynomial consisting of the r — t mutual top coefficients 
of the polynomials in W, then deg (P w — Pi) < <f for all Pi £ W. ■ 

In light of Lemma [TO] and Lemma [TT] presenting a large family of subspace polynomials that agree on many top coefficients 
suffices for providing a word that is adjacent to too many Reed-Solomon codewords. Such a family of size ["(®] g /q n£ was 

presented in Theorem Q] where g|gcd(ro,r) and £ = — 1. Using the standard bound on the Gaussian coefficient (see 

Section HI we have that 

r«/si 

Lr/g -V < 4 a ^{n-r)-nt 

q n( " H 

Plugging in the expression for £ results in an upper bound of 4 q n , and hence the size of the family is not more than 4 times 
the length of the code, which is q n . In addition, an explicit family can be derived from Construction [2] whose size is not 
super-polynomial in n either, and hence a super-polynomial list decoding bound is not achieved. 

Both of these families do provide dense sets that are larger than the ones achieved by a counting argument. Dense sets of 
Reed-Solomon codewords have applications in hardness of approximating the minimum distance of a linear code El and in 
constructing error-correcting codes with improved parameters lf32l . However, the dense sets provided by our results are not 
nearly large enough for these applications. 


Appendix B 

The following lemmas shows that the bound from Theorem [3] strictly outperforms the bound implied by Theorem [2] and 
Corollary |2] given in ED, when applied over the code in Example [T] 


Lemma 12. For any i > 1, 


Proof: Clearly, > 0, and hence. 



1 

2*+!' 


2 , 1 
2 *+! 2 2 ®+ 2 



> 2 i - 1 


> 

> 


2 1 - 1 
2 * 


2 i - 1 


2 i 



> 

> 



1 

2 i+1 


Lemma 13. For a large enough n, the radius r = f or which the code in Example [7] cannot be list decoded efficiently 
according to Theorem [7] is strictly smaller than the radius t' which is guaranteed by the Corollary \2\ 

Proof: Inserting e = 1 into the bound of Corollary [2] provides a stronger bound than Corollary |2] for any e < 1. Therefore, 
when our bound outperforms Corollary [2] with e = 1, our bound also outperforms Corollary [2] with s < 1. 
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Since in Example Q] we have d = ~ — 1 it follows that 


t' 


to + n (m + n) 


— m(d — 1) 


2 

to + n 


m + n /(m + n) 2 


(*-’) 


1 - 4 1 - 


4 m(d — 1) 


(to + n ) 2 


(4) 


Notice that by Theorem [2] the bound of |[7T1 is weaker if to > n, whereas the bound of Theorem [3] does not depend on to. 
Therefore, it suffices to show that the bound from Theorem 0 outperforms the one from f3TI for to, = n. In this case, Q 
simplifies to 


t' > n 1 — a /1 — 


1 


For a large enough n the term — may be neglected. Hence, by Lemma fl2l (0 implies that 


(5) 


t' > n [ 1 — 


2 * — 1 \ n 

2* J > 2 i+1 ~ T ' 
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